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SPECIFICATION 
TITLE OF THE INVENTION 
IMAGE SERVER AND METHOD OF CONTROLLING SAME 
BACKGROUND OF THE INVENTION 
5 Field of the Invention 

This invention relates to an image server and a 
method of controlling the same, a client terminal and a 
method of controlling the same, an image printing system 
and method, a data installing apparatus and a method of 
10 controlling the same, an image data output apparatus and 
method, and a printing management apparatus and method. 
Description of the Related Art 

With the growth of the Internet and the widespread 
use of personal computers, it has become possible for 
15 individuals to send and receive data containing a large 
quantity of data, such as image data. A large quantity 
of image data can be stored in a server in advance, the 
image data can be downloaded by accessing the server and 
images represented by the image data can be printed 
20 using a printer. 

It is a general rule that an individual who takes 
or creates a picture has the copyright to the picture. 
Copyright- free pictures (pictures for which the 
copyright has been abandoned) are the exception rather 
25 than the rule. 

Accordingly, it is important to prevent persons who 
are not duly authorized users from making unlawful use 
of image data, as by inhibiting printing of images. To 
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achieve this, copyright management of images is vital. 
SUMMARY OF THE INVENTION 
Accordingly, an object of the present invention is 
to arrange it so that an individual having the legal 
5 privilege to an image can utilize the image. 

Another object of the present invention is to 
manage the printing conditions of an image in a 
comparatively simple manner. 

According to a first aspect of the present 
10 invention, the foregoing objects are attained by 

providing an image server for outputting encrypted image 
data to at least one client terminal among a plurality 
thereof, comprising: a selection unit for selecting, 
from among the plurality of client terminals, a client 
15 terminal to which image data is to be output; an 

encryption unit (encryption means) for encrypting the 
image data using an encryption key which corresponds to 
the client terminal that has been selected by the 
selection unit; and an encrypted image data output unit 
20 for outputting image data that has been encrypted by the 
encryption unit. 

The first aspect of the present invention provides 
also a method of controlling the above-described image 
server. Specifically, there is provided a method of 
25 controlling an image server for outputting encrypted 
image data to at least one client terminal among a 
plurality thereof, the method comprising the steps of: 
selecting, from among the plurality of client terminals. 
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a client terminal to which image data is to be output; 
encrypting the image data using an encryption key which 
corresponds to the client terminal that has been 
selected; and outputting image data that has been 
5 encrypted . 

In accordance with the first aspect of the present 
invention, an encryption key used for encryption is 
decided for each of the plurality of client terminals. 
(For example, an encryption key may be decided for each 

10 group of a plurality of client terminals or a different 
encryption key may be decided for each client terminal.) 
At least one client terminal is selected from among the 
plurality thereof. Image data is encrypted using the 
encryption key corresponding to the selected client 

15 terminal, and the encrypted image data is output to the 
selected client terminal. 

Thus, in accordance with the first aspect of the 
present invention, an encryption key is decided for each 
client terminal and encryption is performed using the 

20 encryption key that corresponds to the selected client 

terminal. By deciding a decryption key corresponding to 
an encryption key for every client terminal, decryption 
can be carried out using the decryption key that has 
been decided. Decryption can be performed at one client 

25 terminal among a plurality thereof, thereby making it 
possible to prevent decryption at the other client 
terminals. Thus, a user or operator of an unauthorized 
client terminal will not be able to decrypt image data 
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that has been encrypted. 

Image data may be output by transmitting the image 
data, or an arrangement may be adopted in which image 
data is output by being recorded on a portable recording 
5 medium (a floppy disk, CD-ROM, memory card, etc.). 

Image data may include high-resolution image data 
for printing and display image data having a resolution 
lower than that of the high-resolution image data for 
printing. 

10 In this case, the high-resolution image data for 

printing would be encrypted. 

Since the display image data need not necessarily 
be encrypted, it can be displayed without decryption. 
Because the display image data has a resolution lower 

15 than that of the image data for printing, damage 
ascribable to any unlawful use will be minimal. 

A second aspect of the present invention relates to 
the decrypting of image data that has been encrypted by 
the first aspect of the present invention. A client 

20 terminal in accordance with the second aspect of the 

present invention comprises an input unit for inputting 
image data that has been encrypted using an encryption 
key which corresponds to this client terminal; a 
decryption unit (decryption means) for decrypting 

25 encrypted image data, which has been input by the input 
unit, using the corresponding decryption key; and an 
output unit for outputting image data that has been 
decrypted by the decryption unit. 
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The second aspect of the present invention provides 
also a control method suited to the above-described 
client terminal. Specifically, the method comprises the 
steps of: inputting image data that has been encrypted 
5 using an encryption key which corresponds to the client 
terminal; decrypting input encrypted image data using 
the corresponding decryption key; and outputting image 
data that has been decrypted. 

In accordance with the second aspect of the present 
10 invention, image data that has been encrypted using an 
encryption key corresponding to a client terminal is 
entered. The entered encrypted image data is decrypted 
by the corresponding decryption key and then output. 
Thus, decryption can be performed using a 
15 decryption key even if the encryption key differs for 
each client terminal. 

Input of encrypted image data may be performed by 
receiving image data that has been transmitted or by 
reading encrypted image data that has been recorded on a 
20 portable recording medium. 

Further, output of decrypted image data may be 
performed by transmitting decrypted image data or by 
writing decrypted image data to a portable recording 
medium. 

25 An image printing system according to a third 

aspect of the present invention comprises: an image 
selection unit for selecting at least one image from 
among a plurality thereof; a print command unit for 
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applying a command to print the image that has been 
selected by the image selection unit; and a printing 
unit, which is responsive to a print command applied by 
the print command unit, for printing, on the same 
5 visible recording medium, the image that has been 

selected by the image selection unit and information 
relating to a copyright holder of the selected image. 

The third aspect of the present invention provides 
also a method suited to the above-described system. 

10 Specifically, the method comprises the steps of: 

selecting at least one image from among a plurality 
thereof; receiving a command to print the image that has 
been selected; in response to a print command applied by 
the print command unit, printing, on the same visible 

15 recording medium, the image that has been selected and 
information relating to a copyright holder of the 
selected image. 

In accordance with the third aspect of the present 
invention, one image is selected from among a plurality 

20 thereof. When a command to print a selected image is 

applied, the selected image and information relating to 
the copyright holder of the image are printed on the 
same visible recording medium. 

Since an image and information relating to the 

25 copyright holder of the image are recorded on the same 
visible recording medium, the copyright holder of the 
image can be ascertained merely by looking at the 
visible recording medium. Since the copyright holder of 



- 7 - 



the image can be determined, unlawful use of the printed 
image can be prevented. 

The information relating to the copyright holder 
may be the name of the copyright holder per se, an 
5 indication to the effect that the image is not copyright 
free, or image indicating the source of the image. 

Information relating to the copyright holder may be 
input by the operator or may be stored as data in the 
same image file that contains the image data 
10 representing the image. The image data is read out of 
the file and the image represented by the image data is 
printed. Data representing the information relating to 
the copyright holder is read out of this file and the 
information relating to the copyright is recorded on the 
15 visible recording medium on which the image has been 
recorded . 

The visible recording medium refers to a medium 
such as paper or film on which an image is printed so 
that the image can be seen by the human eye. 

20 Data in which the image data representing a 

plurality of images and information relating to the 
copyrights of these images are associated with each 
other may be entered. In this case a desired image 
would be selected from among the plurality of images 

25 represented by the entered image data. 

An image printing system according to a fourth 
aspect of the present invention comprises: a scanner 
for reading an image that has been recorded on a visible 



recording medium and outputting image data representing 
the read image; a determination unit (determination 
means) for determining whether an image that has been 
read by the scanner contains information relating to a 
5 copyright holder of the image; an image printing unit 
for printing an image, which has been read by the 
scanner, in accordance with a determination by the 
determination unit that the read image does not contain 
information relating to the copyright holder; and a 

10 printing controller (printing control means) for halting 
normal printing of the image by the image printing unit 
in accordance with a determination by the determination 
unit that the read image contains information relating 
to the copyright holder. 

15 The fourth aspect of the present invention provides 

also a method suited to the above-described system. 
Specifically, the method comprises the steps of: 
reading an image that has been recorded on a visible 
recording medium and acquiring image data representing 

20 the read image; determining whether an image that has 
been read contains information relating to a copyright 
holder of the image; printing an image, which has been 
read, in accordance with a determination that the read 
image does not contain information relating to the 

25 copyright holder; and halting normal printing of the 

image in accordance with a determination that the read 
image contains information relating to the copyright 
holder . 
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In accordance with the fourth aspect of the present 
invention, an image that has been recorded on the 
visible recording medium is read. It is determined 
whether the read image contains information relating to 
5 the copyright holder of this image. If it is determined 
that the read image does not contain information 
relating to the copyright holder of the image, then the 
read image is printed. If it is determined that the 
read image contains information relating to the 

10 copyright holder of the image, normal printing of this 
read image is halted. 

If an image contains information relating to the 
copyright holder, then this image is considered not to 
be copyright free. Accordingly, there is the danger 

15 that the image may be decrypted unlawfully by a person 
other than a duly authorized user. In accordance with 
the fourth aspect of the present invention, normal 
printing is halted if an image contains information 
relating to a copyright holder. As a result, unlawful 

20 decryption of an image by a person other than a duly 
authorized user can be prevented. 

Normal printing means printing such that the image 
obtained by printing is recognized as being 
substantially identical with the original image. The 

25 halting of normal printing means stopping the printing 
of an image per se, performing printing such that the 
printed image will not be recognized as being the 
original image, e.g., printing a warning statement, 
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which indicates that the copy is unlawful, in a form 
superimposed on the original image, or printing only a 
portion of the original image. In any case, it will 
suffice if the image obtained by printing is one that 
5 will not be recognized as being identical with the 
original image. 

In accordance with a fifth aspect of the present 
invention, there is provided a data installing apparatus 
for reading data from a first portable recording medium 

10 on which the data has been recorded and installing the 
image data that has been read, wherein a unique first 
password has been stored in an image printing unit and 
the apparatus comprises: a password reading unit for 
reading a second password from a second portable 

15 recording medium on which the second password has been 
rewritably recorded; a password determination unit 
(password determination means) for determining whether 
the first password and the second password, which has 
been read by the password reading unit, match; a first 

20 installation unit (first installation means) for 
executing the installation in response to a 
determination by the password determination unit that 
the first and second passwords match; and an 
installation inhibiting unit (installation inhibiting 

25 means) for inhibiting the installation in response to a 
determination by the password determination unit that 
the first and second passwords do not match. 

The fifth aspect of the present invention provides 
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also a method suited to the above-described data 
installation apparatus. Specifically, there is provided 
a data installation method in a data installing 
apparatus for reading data from a first portable 
5 recording medium on which the data has been recorded and 
installing the image data that has been read, wherein a 
unique first password has been stored in the data 
installation apparatus and the method comprises the 
steps of: reading a second password from a second 

10 portable recording medium on which the second password 
has been rewritably recorded; determining whether the 
first password and the second password, which has been 
read, match; executing the installation in response to a 
determination that the first and second passwords match; 

15 and inhibiting the installation in response to a 

determination that the first and second passwords do not 
match. 

In accordance with the fifth aspect of the present 
invention, data (image data, programs, etc.) has been 

20 recorded on the first portable recording medium. 

Further, the unique first password has been stored in 
the data installing apparatus (e.g., an image printing 
apparatus). Furthermore, the second password has been 
rewritably stored on the second portable recording 

25 medium. 

Before data that has been stored on the first 
portable recording medium is installed in the data 
installing apparatus, the second password is read from 
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the second portable recording medium and then it is 
determined whether the read second password matches the 
first password of the data installing apparatus. 

If the two passwords match, then it is recognized 
5 that the first portable recording medium is for the data 
installing apparatus having the matching first password. 
Image data that has been stored on the first portable 
recording medium can be installed in the data installing 
apparatus. If the two passwords do not match, then it 

10 is construed that the first portable recording medium is 
not for the data installing apparatus having the first 
password and that an attempt is being made to perform 
installation by utilizing it for another data installing 
apparatus. Image data that has been stored on the first 

15 portable recording medium is inhibited from being 
installed in the data installing apparatus. 

In accordance with the fifth aspect of the present 
invention, data that can be installed in the data 
installing apparatus is data that has been recorded on 

20 the first portable recording medium for this data 

installing apparatus. Data that has been recorded on 
the first portable recording medium determined to be for 
prescribed data installing apparatus is inhibited from 
being installed in the other data installing apparatus. 

25 Thus, data can be installed only by a duly authorized 
person (i.e., in a legitimate data installing 
apparatus ) . This makes it possible to prevent unlawful 
installation . 
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Data indicating the number of installations may be 
recorded on the second portable recording medium. In 
this case the data indicating the number of 
installations recorded on the second portable recording 
5 medium is read and, when the number of installations 
indicated by this read data is zero, password 
determination is halted. The installation is executed 
in response to the halting of password determination and 
the number of installations indicated by the data that 
10 has been recorded on the second portable recording 
medium is incremented in response to execution of 
installation . 

When the number of installations is zero, the first 
installation takes place. When installation is 
15 performed the first time, this is construed as being a 
lawful installation and execution of the installation is 
allowed. 

The second password may be the initial data 

prevailing before installation. In this case 
20 installation is inhibited in response to a number of 

installations that is zero and, moreover, a second 

password that is not initial data. 

When the number of installations is zero, the 

second password should be initial data. When the second 
25 password is not initial data regardless of the fact that 

the number of installations is zero, this means that a 

malfunction has occurred. Installation is inhibited as 

a result. 
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In accordance with a sixth aspect of the present 
invention, there is provided an image data output 
apparatus for outputting image data corresponding to a 
plurality of image printing units which print images 
5 represented by image data, comprising: a designation 
unit for designating an output destination of applied 
image data from among the plurality of image printing 
units; a format conversion unit (format conversion 
means) for converting a format of the applied image data 

10 so as to obtain a format conforming to the image 
printing unit that has been designated by the 
designation unit; and an image data output unit for 
outputting the image data, the format whereof has been 
converted by the format conversion unit, to the image 

15 printing unit that has been designated by the 
designation unit. 

The sixth aspect of the present invention provides 
also a method suited to the above-described image data 
output apparatus. Specifically, there is provided an 

20 image data output method in an image data output 

apparatus for outputting image data corresponding to a 
plurality of image printing units which print images 
represented by image data, comprising the steps of: 
designating an output destination of applied image data 

25 from among the plurality of image printing units; 

converting a format of the applied image data so as to 
obtain a format conforming to the image printing unit 
that has been designated; and outputting the image data, 
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the format whereof has been converted, to the image 
printing unit that has been designated. 

In accordance with the sixth aspect of the present 
invention, image data is applied. An output destination 
5 of the applied image data is designated from among a 
plurality of image printing units and the format of the 
applied image data is converted so as to become a format 
conforming to the designated image printing unit. (For 
example, the size of the image is adjusted to the size 

10 of the image printed by the image printing unit. ) The 
image data having the format obtained by the conversion 
is output to the designated image printing unit. 

Thus, image data undergoes a format conversion so 
as to be suited to the designated image printing unit 

15 and then is output to this printing unit. As a result, 
a format conversion at the image printing unit is 
unnecessary. This makes it possible to use an image 
printing unit having a simple construction. 

When the image printing unit and the image data 

20 output apparatus are capable of sending and receiving 

data, image data whose format has been converted can be 
output by being transmitted from the image data output 
apparatus to the image printing unit. When the image 
printing unit and image data output apparatus cannot 

25 send and receive data, image data that has been output 
from the image data output apparatus is recorded on a 
portable recording medium. The portable recording 
medium on which the image data has been recorded is 
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carried to the corresponding image printing unit, where 
the image data that has been recorded on the portable 
recording medium is read. 

An image file containing the image data and data 
5 indicating the output destination of this image data may- 
be entered. In this case the output destination of the 
image data would be designated by the data indicating 
the output destination that is contained in the entered 
image file. 

10 In accordance with a seventh aspect of the present 

invention , there is provided a printing management 
apparatus for managing printing conditions in a 
plurality of image printing units which print images 
represented by image data, wherein data representing 

15 printing history is output from the image printing units 
and the apparatus comprises: a reading unit for reading 
data representing the printing history output from the 
image printing units, and a format conversion unit 
(format conversion means) for converting the data 

20 representing the printing history read by the reading 
unit to data having a predetermined format. 

The seventh aspect of the present invention 
provides also a method suited to the above-described 
printing management apparatus. Specifically, there is 

25 provided a printing management method for managing 

printing conditions in a plurality of image printing 
units which print images represented by image data, 
wherein data representing printing history is output 
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from the image printing units and the method comprises 
the steps of: reading data representing the printing 
history output from the image printing units, and 
converting the data representing the printing history 
5 read to data having a predetermined format. 

In accordance with the seventh aspect of the 
present invention, data representing printing history is 
output from the image printing units and the data that 
has been output is read. The read data representing the 

10 printing history is converted to data having a 
predetermined format. 

In accordance with the seventh aspect of the 
present invention, data representing printing history is 
converted to data having a predetermined format. Since 

15 the data representing the printing history can be 
unified in a predetermined format, management is 
comparatively easy to perform. Editing of the data 
representing the printing history also comparatively 
simple to carry out. 

20 The format-converted data representing the printing 

history may be aggregated for each of the plurality of 
image printing units. 

Other features and advantages of the present 
invention will be apparent from the following 

25 description taken in conjunction with the accompanying 
drawings, in which like reference characters designate 
the same or similar parts throughout the figures 
thereof . 
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BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 is a block diagram illustrating the overall 
configuration of an image communication system according 
to a preferred embodiment of the present invention; 
5 Fig. 2 is a flowchart illustrating the processing 

of the overall operation of the image communication 
system; 

Fig. 3 is a block diagram illustrating the 
electrical construction of an image recording server; 
10 Fig. 4 is a table illustrating the relationship 

between client terminals and encryption keys used when 
applying image files to these client terminals; 

Fig. 5 is a block diagram illustrating the 
electrical construction of a distributing server; 
15 Figs. 6 and 7 are block diagrams illustrating the 

electrical constructions of online and offline client 
terminals, respectively; 

Fig. 8 illustrates the organization of image files; 

Fig. 9 is a flowchart illustrating processing 
20 executed by the image registration server; 

Figs. 10a and 10b illustrate the content of an 
attribute-information recording area and image-data 
recording area included in an image file; 

Fig. 11 illustrates the content of the attribute- 
25 information recording area and image-data recording area 
included in an image file; 

Fig. 12 is a flowchart illustrating processing 
executed by the distributing server; 
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Fig. 13 is a flowchart illustrating printing 
processing at a client terminal; 

Fig. 14 illustrates an example of an image printed 
at the client terminal; 
5 Fig. 15 is a flowchart illustrating processing for 

preventing reprinting; 

Fig. 16 illustrates number of installations and an 
installation key before and after installation of image 
data; 

10 Fig. 17 is a flowchart illustrating processing for 

installing image data; 

Fig. 18 illustrates an example of log data 
transmitted from an online client terminal; 

Fig. 19 illustrates an example of log data written 
15 to a floppy disk at the online client terminal; 

Fig. 20 is a flowchart illustrating processing for 
log aggregation; 

Fig. 21 illustrates an example of unif ied-f ormat 
data; and 

20 Fig. 22 illustrates an example of aggregate log 

data. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 
A preferred embodiment of the present invention 
will now be described with reference to the drawings. 
25 Fig. 1 is a block diagram illustrating the general 

configuration of an image communication system, and Fig. 
2 is a flowchart illustrating an overview of the 
operation of the image communication system. 
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An image communication system obtains approval to 
use an image from an individual (referred to as the 
"image provider"), such as a baseball player, soccer 
player, singer or actor, who possesses the copyright to 
5 the image, and applies the image to a client terminal. 
The image is printed out at the client terminal and the 
printed image is delivered to the user. 

The image communication system includes an image 
registration server 1, an image providing server 2, a 

10 distributing server 3, an operations server 4 and a 
billing server 6. These servers are connected by a 
network so as to be capable of communicating data with 
one another. 

Online client terminals 5A, 5B capable of 

15 communicating with the operations server 4 are included 
in the image communication system. Furthermore, offline 
client terminals 5F, 5G, which input/output image data 
via a portable recording medium such as a memory card, 
CD-ROM (compact disc read-only memory) or FD (floppy 

20 disk) , are included in the image communication system. 
The online client terminals 5A, 5B and offline client 
terminals 5F, 5G are installed at game centers, record 
stores, amusement parks and the like. It goes without 
saying that although the two online client terminals 5A, 

25 5B and two offline client terminals 5F, 5G are 

illustrated in Fig. 1, a greater number of these 
terminals may be provided. 

First, an image is supplied by the image provider. 
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Image data representing the supplied image is encrypted 
by the image registration server 1. An image file which 
contains the encrypted image data is registered in the 
image registration server 1 (step 11). The image file 
5 that has been registered in the image registration 
server 1 is transmitted from the image registration 
server 1 to the image providing server 2 ( step 12 ) . 

When image files are received by the image 
providing server 2, an image file that is to be 

10 distributed is selected from the received image files by 
the operator of the image providing server 2 (step 13). 
The selected image file is transmitted from the image 
providing server 2 to the distributing server 3 (step 
14), which then proceeds to execute predetermined 

15 distribution processing (step 15). The image file is 
transmitted from the distributing server 3 to the 
operations server 4 (step 16). 

The image file is applied, by transmission or 
distribution, to the corresponding client terminals 

20 among the online client terminals 5A, 5B and offline 
client terminals 5F, 5G (step 17). If terminals to 
which the image file is to be applied are the online 
client terminals 5A, 5B, the image file is transmitted 
from the operations server 4. If the terminal to which 

25 the image file is to be applied is an offline client 
terminal 5F, 5G, the image file is recorded on the 
portable recording medium at the operations server 4. 
The portable recording medium on which the image file 
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has been recorded is carried to the offline client 
terminal 5F or 5G, where the image file is read from the 
portable recording medium. 

Image data contained in an image file is decrypted 
5 at the client terminals 5A, 5B, 5F, 5G. The image 

represented by the decrypted image data is printed (step 

18 ) . The printed image is delivered to the user of the 
client terminal in exchange for a fee. A log to the 
effect that the image has been printed also is generated 

10 at the client terminal. 

Data representing the log generated by the client 
terminal is applied to the operations server 4 (step 

19) . In case of the online client terminals 5A, 5B, the 
log data is transmitted from the online client terminals 

15 5A, 5B to the operations server 4 by communication. In 
case of the offline client terminals 5F, 5G, the log 
data is recorded on the portable recording medium and 
the medium is carried to the operations server 4. The 
latter reads the log data that has been recorded on the 

20 portable recording medium. 

Log data input to the operations server 4 is 
transmitted to the billing server 6 (step 20). On the 
basis of the log data, the billing server 6 executes 
billing processing for each client terminal (step 21). 

25 If necessary, a user fee is paid to the image provider 
in accordance with the totaled bill. 

Further details of the image communication system 
will become apparent from the description that follows. 
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Fig- 3 is a block diagram illustrating the 
electrical construction of the image registration server 
1. 

The overall operation of the image registration 
5 server 1 is controlled by a CPU 31. The latter 
functions also to encrypt image data based upon a 
program. 

A flatbed scanner 39 and a card reader 40 are 
connected to the image registration server 1. An image 

10 is read from the image provider by the flatbed scanner 
39 and card reader 40. If the image is a visible 
recording medium such as a photograph, poster or 
calendar, the image is read by the flatbed scanner 39 
and the image data representing the image is output from 

15 the flatbed scanner 39. If the image has been converted 
to image data and stored on a memory card, then the 
memory card is inserted into the card reader 40. The 
image data that has been stored on the memory card is 
read by the card reader 40. The image data output from 

20 the flatbed scanner 39 or card reader 40 is input to the 
image registration server 1 by an SCSI (Small Computer 
System Interface) 32. 

The image registration server 1 includes a memory 
33 for storing data temporarily and a hard-disk drive 34 

25 for accessing a hard disk. The image registration 

server 1 further includes a modem 35 for communication 
via a network, and a keyboard/mouse control circuit 36 
for controlling operation based upon an operating 
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command from a keyboard and mouse 38. A display unit 41 
controlled by a display control circuit 37 is connected 
to the image registration server 1. 

In this embodiment, the size of an image to be 
5 printed is specific to each client terminal. 

Accordingly, processing to adjust the size of the image 
data is executed by the image registration server 1 so 
as to obtain a size suited to the printed image at each 
client terminal. The image data, which has been 

10 processed to adjust the size, is stored in the hard disk 
corresponding to each client terminal. 

Fig. 4 illustrates the corresponding relationship 
between client terminals and encryption keys . 

In the communication system according to this 

15 embodiment, image data input to the image registration 
server 1 is encrypted thereby. As mentioned above, the 
encrypted image data is transmitted to the servers 2, 3 
and 4 and then is applied to the online client terminals 
5A, 5B or offline client terminals 5F, 5G. Accordingly, 

20 data indicative of encryption keys used in encryption 
has been stored on the hard disk. 

The encryption key differs for each client 
terminal. (The encryption key may differ for each group 
comprising a plurality of client terminals.) Data 

25 indicative of decryption keys which correspond to the 
encryption keys has been stored in respective ones of 
the client terminals. Image data that has been 
encrypted using encryption keys corresponding to the 



- 25 - 



client terminals can be decrypted by the decryption keys 
corresponding to these encryption keys. This means that 
while encrypted image data can be decrypted at one 
client terminal, the encrypted image data cannot be 
5 decrypted at the other client terminals. Of course, 
this does not prevent the use of a common key for all 
client terminals. 

Fig. 5 is a block diagram illustrating the 
electrical construction of the distributing server 3. 

10 The overall operation of the distributing server 3 

is controlled by a CPU 51. 

The distributing server 3 includes a hard disk 52, 
a hard-disk drive 53 for accessing the hard disk 52 and 
a memory 54 for storing data temporarily. The 

15 distributing server 3 further includes a network 

interface 55 for communicating with the other servers 1, 
2, 4 and 6, and a keyboard /mouse control circuit 56 for 
controlling the distributing server 3 based upon an 
operating command from a keyboard and mouse 57. A 

20 display unit 59 controlled by a display control circuit 
58 is connected to the distributing server 3. For each 
client terminal to which image data is to be applied, 
the image data is stored in a prescribed area of the 
hard disk 52 in distributing server 3. 

25 Fig. 6 is a block diagram illustrating the 

electrical construction of the online client terminal 
5A. The other online client terminal 5B is similarly 
constructed . 
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The overall operation of the online client terminal 
5A is controlled by a CPU 61- The latter functions also 
to execute processing for decrypting image data based 
upon a program. 
5 A flatbed scanner 71, a printer 72 and a card 

reader 73 are connected to the client terminal 5A. An 
image that has been recorded on a visible recording 
medium is read by the flatbed scanner 71, and an image 
that has been recorded on a memory card is read by the 

10 card reader 73. The image data that has been read is 
input to an image processing circuit 60 by an SCSI 62. 
Further, an image represented by image data is printed 
out by the printer 72. 

The image processing circuit 60 of the terminal 5A 

15 includes a memory 63 for storing data temporarily and a 
hard-disk drive 64 for accessing a hard disk. The image 
processing circuit 60 includes a modem 65 for 
communicating with the operations server 4. 

A display unit 68 controlled by a display control 

20 circuit 67 is connected to the image processing circuit 
60 of the terminal 5A. A touch-sensitive panel 69 is 
formed on the screen of the display unit 68. A signal 
indicating that the touch-sensitive panel 69 has been 
touched is input to the image processing circuit 60 by a 

25 control circuit 66 for the touch-sensitive panel 69. 

Data indicative of the decryption key specific to 
the terminal 5A, a specific serial number (ABC0001) and 
a terminal ID have been stored on the hard disk of the 
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terminal 5A, as mentioned earlier. 

Fig. 7 is a block diagram illustrating the 
electrical construction of the offline client terminal 
5F. Circuits in Fig. 7 identical with those of the 
5 online client terminal 5A shown in Fig. 6 are designated 
by like reference characters and need not be described 
again . 

The offline client terminal 5F differs from the 
online client terminal 5A in that it is devoid of the 

10 modem 65 and includes a CD-ROM drive 74 for reading data 
that has been written to a CD-ROM 76 and an FD drive 75 
for writing data to a floppy disk 77. 

Image data has been written in and stored on the 
CD-ROM 76 by the operations server 4, as mentioned 

15 earlier. As will be described later, the number of 

installations of image data and an installation key that 
have been written to the CD-ROM 76 are written to the 
floppy disk 77. Image data that has been written to the 
CD-ROM 76 is installed only in a prescribed offline 

20 client terminal using these items of data. 

Fig. 8 illustrates the organization of image files 
registered at the image registration server 1. 

As shown in Fig. 8, "LIST" and image files (where 
"0001", "0002", "0003", "0004" are the file names of the 

25 image files) are managed by "ROOT". The file names of 
the image files managed by this arrangement and data 
indicating the types of images (template image or 
complete image) represented by the image data contained 
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in the image files have been stored in "LIST". A 
template image is an image which, by being combined with 
another image, provides a complete image. A template 
image is formed to have a window. By combining another 
5 image, e.g., an image representing the face of the user, 
with the window, a complete image of one frame is 
obtained. A mask image for defining the window with 
regard to the template image also has been stored in the 
image file together with the template image. A complete 
10 image by itself constitutes an image of one frame. 

The image file contains an image for display, 
attribute information and color-space information in 
addition to the template image and mask image or the 
complete image. 

15 The image for display is an image displayed on the 

display unit. The display image has a resolution lower 
than that of the template image or complete image (the 
template image and complete image are used for 
printing) . The complete image and the template image 

20 are encrypted, as mentioned earlier, but the display 
image is not. Accordingly, the display image can be 
displayed at each of the servers 1, 2, 3 and 4 without 
being decrypted. 

The attribute information includes print target 

25 information indicating the client terminal to which 
image data is to be applied, image ID, image 
information, print information, copyright information 
and billing information. The image information includes 
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image type indicating whether an image is a complete 
image or template image, by way of example, image size 
and image format. The print information includes 
printable size, printing orientation and printable 
5 media. The billing information includes the amount of 
money, due date and number of valid prints. 

With regard to a template image, the attribute 
information includes template information and mask image 
information. The template information includes an ID 

10 indicating the category of the template and, if the 

template image is a calendar image, the total number of 
pages of the calendar and the calendar number, etc. The 
mask image information includes data indicating the 
number of masks, mask size and mask position. 

15 The color-space information is data indicating the 

optimum color space of the image. 

By registering files in the image registration 
server 1, the image files are stored in accordance with 
the organization shown in Fig. 8. 

20 Fig. 9 is a flowchart illustrating the processing 

( step 11 in Fig . 2 ) executed by the image registration 
server 1. 

The operator of the image registration server 1 
receives images from the image provider. A client 
25 terminal to which an image from among these received 

images is to be distributed is selected by the keyboard 
and mouse 38 (step 80). 

A check is performed to determine whether the image 



received from the image provider has been recorded on a 
visible recording medium (step 81). If the image has 
been recorded on a visible recording medium ("YES" at 
step 81) , then this image is read by the flatbed scanner 
5 39 (step 82). Image data that has been output from the 
flatbed scanner 39 is applied to the memory 33, where 
the data is stored temporarily. If the image is one 
represented by image data that has been recorded on a 
memory card ("NO" at step 81), then the memory card is 

10 inserted into the card reader 40. The image data that 
has been stored on the memory card is read by the card 
reader 40 and stored in memory 33 temporarily. It goes 
without saying that when the image data representing the 
image provided by the image provider has been stored on 

15 a CD-ROM or floppy disk, the image registration server 1 
is provided with a CD-ROM drive and an FD drive to read 
the image data. 

Image data that has been stored in the memory 33 is 
converted to data having a predetermined format (step 

20 84). Further, pixel interpolation processing is 

executed by the CPU 31 to create a display image. Data 
representing the display image that has been created is 
also stored in memory 33 temporarily. 

Attribute information and color-space information 

25 is entered by the operator (step 85). The entered 

attribute information and color-space information is 
also stored in memory 33 temporarily. An image file is 
generated from the data representing the template image 
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and mask image or the data representing the completed 
image, the image data representing the display image, 
the attribute information and the color-space 
information, which have been stored in the memory 33, 
5 and a prescribed image-file name is attached to this 
image file (step 86). 

If the image data is converted, it is entered by 
the client terminal to which the image data is to be 
applied. The image data undergoes a size adjustment to 

10 obtain the image size printed by the client terminal 

(step 87). It goes without saying that the size of the 
image printed by the client terminal is applied to the 
image registration server 1 beforehand. 

If the image data is subjected to a size 

15 adjustment, then the encryption key corresponding to the 
client terminal selected at step 80 is read out of the 
hard disk. For example, if the selected client terminal 
is the online client terminal 5A, then the key A is read 
out of the hard disk. Encryption of the image data that 

20 has been stored in the memory 33 is carried out through 
a prescribed method using the key that has been read out 
(step 88). It goes without saying this encryption is 
for application to a complete image and template image. 
The generated image file is registered in 

25 accordance with the organization shown in Fig. 8 
described above (step 89). 

The image file thus registered is transmitted from 
the image registration server 1 to the image providing 
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server 2, as described above. The image file received 
by the image providing server 2 is transmitted to the 
distributing server 3 . 

Figs. 10a, 10b and Fig. 11 illustrate the data 
5 structure of attribute information and image data in an 
image file. 

Fig. 10a illustrates the data structure of image 
data <the structure of the image file) in the image 
registration server 1 before conversion of the data 
10 size, and Fig. 10b illustrates the data structure of 
image data (the structure of the image file) in the 
image registration server 1 after conversion of the data 
size. 

Before the image data undergoes a size conversion, 
15 encrypted image data is stored in an image-data 
recording area, as shown in Fig. 10a. 

Stored in an attribute-information recording area 
are the data format, print target (the client terminal 
to which the image data is to be applied) , the size of 
20 the print at the print target, the X- and Y-direction 
sizes of the image data that has been stored in the 
image-data recording area, and the copyright holder of 
the image represented by the image data that has been 
recorded in the image-data recording area (only some of 
25 the attribute information is shown). No print-size data 
is stored before the conversion. 

If the size of image data is converted at the image 
registration server 1 in the manner described above (the 
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processing of step 87 in Fig. 9), then, as shown in Fig. 
10b, data indicating the size of the print image of the 
client terminal that is the print target (in Fig. 10b, 
the print target is the No. 1 online client terminal and 
5 the print size is A4) is stored as the print size in the 
attribute-information recording area. Also stored are 
the X- and Y-direction sizes conforming to the print 
size. 

Image data after the size conversion is encrypted 

10 and stored in the image-data recording area. 

Fig. 11 illustrates the manner in which the 
attribute information and image data have been stored 
after the size conversion, where the print target is the 
No. 2 online client terminal. 

15 The No. 2 online client terminal prints an image of 

size A6. Data indicative of "A6", therefore, has been 
stored as the print size. Further, data indicating the 
X- and Y-direction sizes corresponding to the image of 
size A6 has been stored as well. 

20 Thus, the size of image data is adjusted at the 

image registration server 1 so as to conform to the 
print size of the client terminal to which the image 
data is to be applied. 

Fig. 12 is a flowchart illustrating processing (the 

25 processing of step 15 in Fig. 2) executed by the 
distributing server 3. 

The print target is read from the attribute 
information contained in the image file (step 91). 
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The image data is distributed for each print target 
and is stored on the hard disk 52 (step 92). 

When the distributing server 3 finishes executing 
the processing shown in Fig. 12, this image file is 
5 transmitted from the distributing server 3 to the 

operations server 4 . The latter applies the image file 
to the client terminal constituting the print target 
that has been written in the attribute information. If 
the client terminal is online, the image file is applied 
10 to the terminal by transmission. If the client terminal 
is offline, the image file is written to the CD-ROM and 
the CD-ROM is carried to the corresponding offline 
client terminal. 

Fig. 13 is a flowchart illustrating printing 
15 processing {the processing of step 18 in Fig. 12) 

executed by a client terminal, and Fig. 14 illustrates 
an example of an image printed at the client terminal. 

If the client terminal is online, an image file 
that has been transmitted from the operations server 4 
20 by the modem 65 is received and the received image file 
is stored in the memory 63 temporarily. If the client 
terminal is offline, the CD-ROM 76 to which the image 
file has been written is set in the CD-ROM drive 74 and 
the image data that has been written to the CD-ROM 76 is 
25 read by the CD-ROM drive 74. The read image data is 

applied to the memory 63 and stored there temporarily. 

Display images are displayed on the display unit 
68. In response to touching of the touch-sensitive 
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panel 69 by the user, the image to be printed is 
selected. 

A decryption key that has been stored on the hard 
disk of the client terminal is read out. From the image 
5 data that has been stored in the memory 63, image data 
for printing corresponding to the display image selected 
by the user is decrypted using the decryption key that 
has been read out (step 101). Print-mark data 
indicating the copyright holder based upon the copyright 

10 information that has been stored in the image file is 
inserted into the decrypted image data (step 102). 

The image data into which the print-mark data has 
been inserted is applied to the printer 72 so that the 
image represented by the image data is printed (step 

15 103). The printed image is thus output (step 104). 

As shown in Fig. 14, the image representing the 
image data appears in an image recording area 106 on an 
output print 105. A copyright-information recording 
area 107 is formed at the lower right of the print 105. 

20 Information regarding the copyright holder represented 
by the print-mark data appears in the copyright- 
information recording area 107. In the example depicted 
in Fig. 14, characters reading "Printed by JOHN SMITH " 
appear in the copyright-information recording area 107. 

25 Here "JOHN SMITH " indicates the image copyright holder. 
Since the image copyright holder can be ascertained at a 
glance, copyright infringement can be prevented. 

Further, since a decryption key corresponding to 
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the encryption key has been stored only in the terminal 
that is the print target, decryption can be carried out 
only at the terminal that is the print target and not at 
other terminals. This means that the encrypted image 
5 data can be decrypted only at the client terminal of an 
operator who has the rightful privilege to use the 
image. Since the encrypted image data cannot be 
decrypted at a client terminal of an operator who does 
not possess the rightful privilege to use the image, it 

10 is possible to prevent unlawful use of image data by the 
operator of the client terminal. 

Fig. 15 is a flowchart illustrating processing (the 
processing of step 18 in Fig. 2) for preventing unlawful 
reprinting at a client terminal. 

15 If an image is printed in the manner described 

above, there are instances where the image is read using 
a scanner and printed again. Fig. 15 illustrates 
processing for preventing such unlawful reprinting. 

A visible recording medium is placed on the flatbed 

20 surface of the flatbed scanner 71 and the image that has 
been recorded on the visible recording medium is read 
(step 111). Next, processing for detecting a printing 
mark from the copyright-information recording area 107 
of the read image is executed (step 112). 

25 If the read image contains a printing mark ( " YES" 

at step 113), a decision is rendered to the effect that 
this is unlawful printing and a warning to this effect 
is displayed on the display unit 68 (step 115). 
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Processing for printing the image represented by the 
image data read by the scanner 71 is suspended. 

If the read image does not contain a printing mark 
("NO" at step 113), then it is decided that this is not 
5 unlawful printing. Accordingly, print processing is 
executed by the printer 72 {step 114). 

Fig. 16 illustrates the manner in which data 
indicating number of installations and data indicating 
an installation key changes, this data being stored on a 
10 floppy disk used when image data is installed in an 
offline client terminal. 

Image data has been stored on the CD-ROM 76, as 
mentioned above. Further, data indicating number of 
installations and data indicating an installation key 
15 has been stored on the floppy disk 77. 

The number of installations indicates the number of 
times the image data, which has been stored on the CD- 
ROM, has been installed in the offline client terminal. 
The installation key is used to prevent unlawful 
20 installation of image data that has been stored on the 
CD-ROM 76. 

The CD-ROM 76 is inserted into the CD-ROM drive 74 
of the offline client terminal in which the image data 
is to be installed. Further, the floppy disk 77 paired 
25 with the CD-ROM 76 is inserted into the FD drive 75. 

In the initial state (i.e., when image data stored 
on the corresponding CD-ROM 76 has not been installed 
even once), "0" is stored on the floppy disk 77 as the 
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number of installations and "first time" is stored on 
the floppy disk 77 as the installation key. If the 
image data on the CD-ROM 76 is installed, the number of 
installations is incremented. In addition, the 
5 installation key is rewritten to the serial number of 

the offline client terminal. For example, if the serial 
number of the offline client terminal is "ABC0001", the 
installation key is rewritten from "first time" to 
"ABC0001". 

10 Only an offline client terminal in which the CD-ROM 

76 and floppy disk 77 have first been inserted and in 
which the image data has been installed can have image 
data installed within it again subsequently. 

Fig. 17 is a flowchart illustrating processing (the 

15 processing of step 18 in Fig. 2) for when image data 

that has been stored on the CD-ROM drive 74 is installed 
in an offline client terminal. 

The CD-ROM 76 is inserted by the operator of the 
offline client terminal into the CD-ROM drive 74 of the 

20 offline client terminal in which image data is to be 

installed, and the floppy disk 77 corresponding to the 
CD-ROM 76 is inserted in the FD drive 75 by the 
operator . 

The number of installations is read out of the 
25 floppy disk 77 that has been inserted into the FD drive 
75. It is determined whether the read number of 
installations is "0" (step 121). If the number of 
installations is "0" ("YES" at step 121), this indicates 
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that installation of image data has not yet been carried 
out. In this case the installation key should be "first 
time". If the installation key is "first time" ("YES" 
at step 122), then this is confirmation of initial 
5 installation. Accordingly, image data is read from the 
CD-ROM 76 that has been inserted in the CD-ROM drive 74 
and the image data is installed on the hard disk (step 
123) . 

If installation is finished, the number of 

10 installations read from the floppy disk 77 is 

incremented. Data indicating the incremented number of 
installations is written to the floppy disk 77 by the FD 
drive 75. The installation key is rewritten from "first 
time" to the serial number "ABC0001" of the offline 

15 client terminal into which the floppy disk 77 has been 
inserted (step 124). 

If the installation key is not "first time" ("NO" 
at step 122) regardless of the fact that the number of 
installations read from the floppy disk 77 is "0" ( "YES" 

20 at step 121), it is considered that some malfunction has 
occurred. In this case the installation processing is 
suspended and the fact that some malfunction has 
occurred is displayed on the display screen of the 
display unit 68. 

25 If the number of installations read out of the 

floppy disk 77 is not "0" ("NO" at step 121), this 
indicates that installation has already been carried 
out. Next, it is determined whether the installation 
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key is "ABC0001" (step 125). 

When the number of installations is not "0" and the 
installation key is "ABC0001" , then it is judged that 
the operator is attempting to install the image data in 
5 an offline client terminal that is the same as the 
offline client terminal in which installation was 
performed initially. In this case it is judged that 
this is processing by a duly authorized person and re- 
installation of the image data that has been recorded on 

10 the CD-ROM 76 is executed (step 126). If installation 
is finished, the number of installations that has been 
stored on the floppy disk 77 is incremented (step 127). 

If the number of installations is not "0" ("NO" at 
step 121) and the installation key is not "ABC0001" 

15 ("NO" at step 125), then it is construed that the 

operator is attempted to install image data stored on 
the CD-ROM 7 6 in an offline client terminal that is 
different from the offline client terminal in which 
installation was performed initially. This installation 

20 is judged to be unlawful and, hence, installation 

processing is inhibited. A warning to this effect would 
be displayed on the display screen of the display unit 
68. 

Thus, re-installation of image data is possible 
25 only at an offline client terminal in which image data 
was installed initially. This makes it possible to 
prevent the unlawful installation of image data in 
another offline client terminal. 
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If an image is printed at a client terminal, a 
history of this printing is generated and data 
representing the printing history is stored in memory 63 
as log data. The log data is supplied from the client 
5 terminal to the operations server 4. If the client 
terminal is online, the log data is transmitted to the 
operations server 4. If the client terminal is offline, 
then the log data is written to a floppy disk. The 
floppy disk to which the log data has been written is 

10 carried to the operations server 4 and is read by the 
operations server 4. 

In any case, log data that has been applied to the 
operations server 4 is transmitted to the billing server 
6. The latter executes processing to aggregate the log 

15 data. 

Fig. 18 illustrates an example of log data 
transmitted from an online client terminal. 

Log data is signified by a label and contains the 
following data: 
20 Terminal ID 

This is a unique ID for identifying a terminal. 
Image ID 

This is an ID specific to an image used in 
printing. 
25 Service Time 

This indicates the date and time at which an image 
was printed. 

Paper Type 
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This indicates the size of the sheet of paper on 
which an image was printed. 
Number of Prints 

This indicates the number of prints of an image. 
5 Fig. 19 illustrates the structure of log data 

stored on a floppy disk by an offline client terminal. 

Log data stored on a floppy disk is stored in 
accordance with a directory structure. 

Terminal ID, image ID, service time, paper type and 
10 number of prints are managed by "ROOT " and this data is 
stored on the floppy disk. 

Thus, the format of the log data differs depending 
upon the client terminal. In an image distribution 
system according to this embodiment, log data supplied 
15 from a client terminal is converted to have a unified 
format and is aggregated in a manner described below. 

Fig. 20 is a flowchart illustrating processing for 
aggregating log data, Fig. 21 illustrates unif ied-format 
data for converting log data to data having a unified 
20 format, and Fig. 22 illustrates log data the format of 
which has been unified by the unif ied-format data. 

Log data that has been transmitted from the 
operations server 4 is received by the billing server 6 
(step 131), as mentioned above. It is determined 
25 whether the received log data has a format identical 
with the unified format (step 132). 

If the received log data does not have a format 
identical with the unified format, which has been 
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decided in advance {"NO" at step 132), then the format 
is converted to a predetermined format (step 133) using 
the unified format shown in Fig. 21. If the received 
log data does have a format identical with the unified 
5 format, which has been decided in advance ( "YES" at step 
132), then the processing of step 133 is skipped. 

If the format is unified, then the log data is 
aggregated, as shown in Fig. 22, by the billing server 6 
(step 134). The aggregated log data is then furnished 
10 to the image provider. 

It goes without saying that the billing server 6 
also has a structure almost the same as that of the 
image registration server 1 and that the log-data 
aggregation processing is executed by the CPU. Further, 
15 the aggregated log data would be recorded on a memory 
card by a card reader. 

Log data unified to a predetermined format is 
furnished to the image provider even in a case where log 
data has been generated in a variety of prescribed 
20 formats for each client terminal. 

An arrangement may be adopted in which subsequent 
printing by a client terminal is allowed in dependence 
upon the printing conditions represented by the log 
data. For example, if printing has been performed more 
25 than a fixed number of times by a client terminal, then 
printing by this client terminal would be allowed. 

In the above -described embodiment, an offline 
client terminal reads image data that has been recorded 
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on a CD-ROM, records log data on a floppy disk and 
applies the log data to the operations server 4. 
However, an arrangement may be adopted in which the 
offline client terminal is provided with the 
5 communication function of a modem or the like and the 
log data is transmitted to the operations server 4. 
This is because the quantity of log data is less than 
that of image data and, hence, requires little time for 
transmission and can be transmitted efficiently. 

10 As many apparently widely different embodiments of 

the present invention can be made without departing from 
the spirit and scope thereof, it is to be understood 
that the invention is not limited to the specific 
embodiments thereof except as defined in the appended 

15 claims. 
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WHAT IS CLAIMED IS: 

1. An image server for outputting encrypted image data 
to at least one client terminal among a plurality 
thereof, comprising: 
5 a selection unit for selecting, from among the 

plurality of client terminals, a client terminal to 
which image data is to be output; 

an encryption unit for encrypting the image data 
using an encryption key which corresponds to the client 
10 terminal that has been selected by said selection unit; 
and 

an encrypted image data output unit for outputting 
image data that has been encrypted by said encryption 
unit . 

15 2. The image server according to claim 1, wherein the 
image data includes high-resolution image data for 
printing and display image data having a resolution 
lower than that of the high-resolution image data for 
printing; and 

20 said encryption unit encrypting the high-resolution 

image data for printing. 
3. A client terminal comprising: 

an input unit for inputting image data that has 
been encrypted using an encryption key which corresponds 
25 to this client terminal; 

a decryption unit for decrypting encrypted image 
data, which has been input by said input unit, using the 
corresponding decryption key; and 
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an output unit for outputting image data that has 
been decrypted by said decryption unit. 
4. An image printing system comprising: 

an image selection unit for selecting at least one 
5 image from among a plurality thereof; 

a print command unit for applying a command to 
print the image that has been selected by said image 
selection unit; and 

a printing unit, which is responsive to a print 
10 command applied by said print command unit, for 

printing, on the same visible recording medium, the 
image that has been selected by said image selection 
unit and information relating to a copyright holder of 
the selected image. 
15 5. The system according to claim 4, further comprising 
an input unit for inputting data in which image data 
representing a plurality of images and information 
relating to copyrights of these images are associated 
with each other; 
20 said image selection unit selecting a desired image 

from among the plurality of images represented by the 
image data input by said input unit. 
6. An image printing system comprising: 

a scanner for reading an image that has been 
25 recorded on a visible recording medium and outputting 
image data representing the read image; 

a determination unit for determining whether an 
image that has been read by said scanner contains 
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information relating to a copyright holder of the image; 

an image printing unit for printing an image, which 
has been read by said scanner, in accordance with a 
determination by said determination unit that the read 
5 image does not contain information relating to the 
copyright holder; and 

a printing controller for halting normal printing 
of the image by said image printing unit in accordance 
with a determination by said determination unit that the 
10 read image contains information relating to the 
copyright holder - 

7. A data installing apparatus for reading data from a 
first portable recording medium on which the data has 
been recorded and installing the image data that has 
15 been read, wherein a unique first password has been 
stored in an image printing unit and said apparatus 
comprises : 

a password reading unit for reading a second 
password from a second portable recording medium on 
20 which the second password has been rewritably recorded; 

a password determination unit for determining 
whether the first password and the second password, 
which has been read by said password reading unit, 
match; 

25 a first installation execution unit for executing 

the installation in response to a determination by said 
password determination unit that the first and second 
passwords match; and 
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an installation inhibiting unit for inhibiting the 
installation in response to a determination by said 
password determination unit that the first and second 
passwords do not match. 
5 8. The apparatus according to claim 7, wherein 

installation-count data indicating number installations 
has been recorded on the second portable recording 
medium, and said apparatus further comprises: 

an installation-count reading unit for reading the 
10 installation-count data indicating number installations 
recorded on the second portable recording medium; 

a determination-halt unit for halting password 
determination by said password determination unit when 
number of installations represented by the installation- 
15 count data read by said installation-count reading unit 
is zero; 

a second installation execution unit for executing 
the installation in response to the halting of password 
determination by said determination-halt unit; and 

20 an incrementing unit for incrementing the number of 

installations, which is represented by the data that has 
been recorded in said second portable recording medium, 
in response to execution of installation by said second 
installation execution unit. 

25 9. The apparatus according to claim 8, wherein initial 
data is set as the second password when installation has 
not yet been performed; 

said installation inhibiting unit inhibiting the 



- 49 - 



installation in response to a number of installations 
that is zero and, moreover, a second password that is 
not initial data. 

10. An image data output apparatus for outputting image 
5 data corresponding to a plurality of image printing 

units which print images represented by image data, 
comprising: 

a designation unit for designating an output 
destination of applied image data from among the 
10 plurality of image printing units; 

a format conversion unit for converting a format of 
the applied image data so as to obtain a format 
conforming to the image printing unit that has been 
designated by said designation unit; and 
15 an image data output unit for outputting the image 

data, the format whereof has been converted by said 
format conversion unit, to the image printing unit that 
has been designated by said designation unit. 

11. The apparatus according to claim 10, further 

20 comprising an input unit for inputting an image file 

containing the image data and data indicating the output 

destination of this image data; 

said designation unit designating the output 

destination of image data by data indicating the output 
25 destination that is contained in the image file that has 

been input by said input unit. 

12 . A printing management apparatus for managing 
printing conditions in a plurality of image printing 
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units which print images represented by image data, 
wherein data representing printing history is output 
from the image printing units and said apparatus 
comprises : 

5 a reading unit for reading data representing the 

printing history output from the image printing units; 
and 

a format conversion unit for converting the data 
representing the printing history read by said reading 
10 unit to data having a predetermined format. 

13. The apparatus according to claim 12, further 
comprising an aggregating unit for aggregating, for each 
of the plurality of printing units, the data which 
represents printing history and the format of which has 

15 been converted by said format conversion unit. 

14. A method of controlling an image server for 
outputting encrypted image data to at least one client 
terminal among a plurality thereof, said method 
comprising the steps of: 

20 selecting, from among the plurality of client 

terminals, a client terminal to which image data is to 
be output; 

encrypting the image data using an encryption key 
which corresponds to the client terminal that has been 
25 selected; and 

outputting image data that has been encrypted. 

15. A method of controlling a client terminal, 
comprising the steps of: 
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inputting image data that has been encrypted using 
an encryption key which corresponds to the client 
terminal; 

decrypting input encrypted image data using the 
5 corresponding decryption key; and 

outputting image data that has been decrypted. 

16. An image printing method comprising the steps of: 
selecting at least one image from among a plurality 

thereof ; 

10 receiving a command to print the image that has 

been selected; 

in response to a print command applied by the print 
command unit, printing, on the same visible recording 
medium, the image that has been selected and information 

15 relating to a copyright holder of the selected image. 

17. An image printing method comprising the steps of: 
reading an image that has been recorded on a 

visible recording medium and acquiring image data 
representing the read image; 
20 determining whether an image that has been read 

contains information relating to a copyright holder of 
the image; 

printing an image, which has been read, in 
accordance with a determination that the read image does 
25 not contain information relating to the copyright 
holder ; and 

halting normal printing of the image in accordance 
with a determination that the read image contains 
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information relating to the copyright holder. 
18. A method of installing data in a data installing 
apparatus for reading data from a first portable 
recording medium on which the data has been recorded and 
5 installing the image data that has been read, wherein a 
unique first password has been stored in the data 
installation apparatus and said method comprises the 
steps of: 

reading a second password from a second portable 
10 recording medium on which the second password has been 
rewritably recorded; 

determining whether the first password and the 
second password, which has been read, match; 

executing the installation in response to a 
15 determination that the first and second passwords match; 
and 

inhibiting the installation in response to a 
determination that the first and second passwords do not 
match. 

20 19. A method of outputting image data in an image data 
output apparatus for outputting image data corresponding 
to a plurality of image printing units which print 
images represented by image data, comprising the steps 
of: designating an output destination of applied image 

25 data from among the plurality of image printing units; 

converting a format of the applied image data so as 
to obtain a format conforming to the image printing unit 
that has been designated; and 
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outputting the image data, the format whereof has 
been converted, to the image printing unit that has been 
designated. 

20. A printing management method for managing printing 
5 conditions in a plurality of image printing units which 
print images represented by image data, wherein data 
representing printing history is output from the image 
printing units and said method comprises the steps of : 
reading data representing the printing history 
10 output from the image printing units; and 

converting the data representing the printing 
history read to data having a predetermined format. 
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ABSTRACT OF THE DISCLOSURE 
An image registration server stores encryption keys 
of respective ones of a plurality of client terminals. 
Image data is encrypted by the image registration server 
5 using the encryption key corresponding to the client 
terminal to which the image data is applied. The 
encrypted image data is applied to the client terminal 
via a server. The client terminal has a decryption key 
stored within so that only a client terminal that is 
10 duly authorized can decrypt encrypted image data. Other 
client terminals that are not duly authorized cannot 
decode the image data. This makes it possible to 
prevent unlawful use of image data even if the image 
data has been intercepted. 
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